Privacy
policy.

Who is responsible

NULL GROUP is the studio name used by Parham Lilian and Meysam Rezaei. It is not a separately registered company. The people currently operating the website decide how project inquiries are handled. To reach us about your information, use the contact page and begin your message with “Privacy request.”

This policy covers nullgp.com. Separate project services and third-party websites linked from this site have their own data practices.

Information the site handles

If you submit the project form, we receive your name, work email, selected service, project description, and—if you choose to provide it—an estimated budget range. Form submissions are stored in our inquiry database and sent to our inbox so we can review and respond. Name, email, service, and project details are required by the form. Please do not send passwords, payment-card details, or sensitive personal information.

When you visit the site, analytics tools collect usage information such as pages viewed, referral source, approximate location, browser and device details, and interactions with the site. Analytics providers may also receive technical identifiers such as an IP address or cookie ID, depending on configuration. The inquiry endpoint separately reads the first forwarded IP address, when available, to limit repeated submissions; its rate-limit counter is temporary application-memory data.

Why we use it

We use inquiry details to understand the request, respond, assess whether we can help, and manage a resulting business discussion. We use analytics to understand how visitors use the site and improve its content and performance. We use rate-limit information to reduce spam or abuse. We may also use or retain information where needed to meet a legal obligation or establish, exercise, or defend a legal claim.

We handle information on the basis available under the privacy law that applies to the situation, including your request for pre-project discussions, our interest in operating, improving, and securing the website, and a legal obligation where one applies. If a particular activity requires consent under applicable law, we will ask for it.

Service providers and sharing

The inquiry database provider stores form submissions so we can manage inquiries. The form also sends your message through Resend to the NULL GROUP inquiry inbox, where it is handled in the email system used for that inbox. Resend may process information as part of delivering email; see its Privacy Policy and Data Processing Addendum.

Analytics providers process site-usage information for measurement and site improvement. The analytics and database providers are service providers to the site. Their processing is subject to the purposes described here and the terms that apply to their services.

Cloudflare Turnstile is optional and appears only if both site and server configuration keys are enabled. If enabled, Cloudflare processes security signals to detect automated or abusive requests. These can include an IP address, browser user-agent, TLS fingerprint, site key, and site origin. See the Turnstile Privacy Addendum.

We also rely on providers that host and deliver the website and store inquiry information. We may disclose information where required by law or needed to protect legal rights or site security. We do not sell inquiry information or use it for targeted advertising.

Storage and retention

Inquiry records are kept in the inquiry database, email inbox, and related correspondence for as long as reasonably needed to review and respond, manage a resulting business discussion, meet legal obligations, or handle a legal claim. They are deleted when no longer needed, subject to any legal retention requirement. Provider backup and retention settings may affect when all copies are removed.

The form rate-limit counter is separate temporary application-memory data. Entries expire after up to one hour and may disappear earlier when the server process restarts.

Processing across countries

NULL GROUP works across Armenia and Türkiye. Our analytics, database, email, hosting, and optional security providers may process information in other countries, depending on their service configuration. We assess each international transfer under the laws that apply to it and use a transfer condition and safeguards permitted by those laws.

Türkiye’s Personal Data Protection Law regulates transfers abroad under Article 9. Armenia’s Law on Protection of Personal Data also applies to relevant processing in Armenia.

Your choices and rights

Depending on the law that applies, you may ask us to confirm whether we hold information about you, provide access to it, explain its purpose or recipients, correct it, or erase/destroy it where the law allows. You may also have a right to object to certain processing or complain to the relevant data-protection authority.

To make a request, use the contact page and write “Privacy request” at the start. Tell us what you are asking for and which inquiry it relates to; we may ask for reasonable information to verify your identity. If Türkiye’s law applies, applications to the data controller are handled under the procedures and time limits in that law, including its 30-day response period. You can read the official Turkish Personal Data Protection Law.

Cookies, security, and changes

Analytics tools may use cookies or similar technologies to measure website usage. You can manage cookies through your browser settings; disabling them may affect analytics or some site functions. If Turnstile is enabled, its security service may use the signals described above. Hosting providers may use technical storage needed to operate and protect the website.

We take reasonable steps to protect inquiry information, but information sent over the internet or email cannot be guaranteed completely secure. This site is intended for business inquiries, not children. We may update this policy when the site or its data handling changes; the date at the top shows the latest version.